Firewall Wizards mailing list archives

RE: Snort based Cisco ACL traffic shunning...?


From: Frank Knobbe <FKnobbe () KnobbeITS com>
Date: Sat, 3 Nov 2001 11:38:36 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

-----Original Message-----
From: J B [mailto:bolesjb () yahoo com]
Sent: Friday, November 02, 2001 9:09 AM

Anyone know of anything anybody's written that configures 
Cisco PIX (or IOS)
ACL's for traffic shunning based on snort alerts?  I know 
guardian can do
this with ipf or chains or something.  Seems that with the 
big bucks that
Cisco gets for their IDS's because of this feature, that 
something like this
would be out there already.


JB,

I was planning on restructuring SnortSam (www.snortsam.net) so that
other firewalls/routers can be reconfigured as well. If someone wants
to assist in coding Cisco router and PIX ACL's, please send me an
email.

Regards,
Frank

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.8
Comment: PGP or S/MIME (X.509) encrypted email preferred.

iQA/AwUBO+QrnJytSsEygtEFEQKGigCeOcIg5NQjCzRlDF9CdOP1wMEO7ZsAnjuD
i+uVC/aza/cq4HqM3PsrjCAK
=AuTe
-----END PGP SIGNATURE-----
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards


Current thread: